FCP Security Policy Management & Compliance 2

Question 1

A FortiGate administrator needs to ensure that firewall policies are only applied during business hours (8 AM–6 PM). Which FortiGate feature enables time-based policy enforcement?

Accepted Answer

Policy scheduling using schedule objects

Answer

FortiGate schedule objects (recurring or one-time) can be attached to firewall policies to restrict when they are active.

Question 2

Under NIST 800-53, which control family is most directly addressed by FortiGate's firewall policy logging and FortiAnalyzer audit trails?

Accepted Answer

Audit and Accountability (AU)

Answer

The AU control family covers audit logging and accountability, which aligns with FortiGate's traffic logging and FortiAnalyzer's audit trail capabilities.

Question 3

An organization wants to prevent shadow IT by blocking unsanctioned SaaS applications. Which FortiGate feature provides application-level policy control for this use case?

Accepted Answer

Application control profiles

Answer

Application control profiles classify and block specific applications (including SaaS) at the policy level using deep packet inspection.

Question 4

Which FortiManager feature allows administrators to deploy a consistent baseline security policy across 50 FortiGate devices simultaneously?

Accepted Answer

Policy packages with installation targets

Answer

FortiManager policy packages can be assigned to multiple FortiGate devices as installation targets, enabling centralized consistent policy deployment.

Question 5

A compliance audit requires proof that no firewall rules have been modified without change control approval. Which FortiManager capability best satisfies this requirement?

Accepted Answer

FortiManager revision history and audit log

Answer

FortiManager maintains a revision history of all policy changes with timestamps and administrator identity, satisfying change control audit requirements.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Security Policy Management & Compliance 2